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AMENDMENTS TO CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Currently Amended) A data carrier having a semiconductor chip fS}-with at least one memory 
containing an operating program which is able to e x e cute carry out multiple executions of at least 
one operation (h) . said multiple executions including a first execution of said operation (h) and 
at least one new execution of said operation (h), the execution each of said multiple executions 
of the operation (h) requiring input data (x) and th e execution of the operation (h) generating 
output data (y), characterized in that 

the operation (h) is disguised before its- each said new execution to obtain a new disguised 
operation (h RI ) that is a different operation than the operation (h). and 

the new disguised operation (h R1 ) is executed with new disguised input data,-arrd 

wherein a random component is used in each new thc-disguising of the operation (h) and 
the input data (x) , and 

wherein each new disguising of the operation (h) and the input data (x) is coordinated 
such that the execution of the new disguised operation (h R1 ) with new disguised input data yields 
output data (y) identical with the output data (y) determined upon execution of the operation (h) 
with input data (x) 9 

whereby disguising said operation (h) before each new execution p revents analysis of said 
operation (h) and exposure of secret information about said semiconductor chip should a 
potential attacker intercept signal patterns generated during execution of said disguised operation 
(h RI ). 
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2. (Currently Amended) A data carrier according to claim 1, characterized in that at least one 
random number (RJ enters into the determination of the new disguised operation (h RI ) and the 

new disguised input data fx ®RJ. 

3. (Currently Amended) A data carrier according to claim 1, characterized in that the new 
disguised operation (h Ri ) is generated from the operation (h) with the aid of XOR operations and 
the new disguised input data is generated from the input data (x) with the aid of XOR operations. 

4. (Canceled) 

5. (Currently Amended) A data carrier according to claim-41, characterized in that at least two 
disguised operations (h Rl , h Rl ) are permanently stored in the data carrier in advance and one of 
the stored disguised operations (h R} , h R1 ) is selected randomly as the new disguised operation 
when a- the new disguised operation is to be executed. 

6. (Currently Amended) A data carrier according to claim 1, characterized in that the new 
disguised operation (h Rl ) is recalculated before its execution and the at least one random number 
(RJ is redetermined for said calculation. 

7. (Previously Presented) A data carrier according to claim 1 , characterized in that the operation 
(h) is realized by a table stored in the data carrier which establishes an association between the 
input data fx) and the output data (y). 

8 (Original) A data carrier according to claim 7, characterized in that the disguising of the input 
data fx) contained in the table is effected by combination with the at least one random number 
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9. (Currently Amended) A data carrier having a semiconductor chip (5) with at least one 
memory containing an operating program which is able to execut e carry out multiple executions 
of at least one operation (h) . said multiple executions including a first execution of said operation 
(h) and at least one new execution of said operation flt). the execution each of said multiple 
executions of the operation (h) requiring input data (x) and the execution of the operation (It) 
generating output data (y) 9 characterized in that 

the operation (h) is disguised before its- each said new execution to obtain a new disguised 
operation (h Ri ) that is a different operation than the operation (h) ^ 

the new disguised operation (h R1 ) is executed with new disguised input dat a to obtain a 
disguised operation (li^ that i3 a different operation than the operation (li) , 

wherein a random component is used in each new t he-disguising of the operation (h) and 
the input data (x) . and the new disguising of the operation (h) and the input data (x) is coordinated 
such that the execution of the new disguised operation (h RJR2 ) with new disguised input data 
yields new disguised output data which are disguised relative to the output data (y) determined 
upon execution of the operation (h) with input data (x), and 

the output data (y) can be determined from the new disguised output data with the aid of 
data (RJ used for disguising the operation (h), 

whereby disguising said operation (h) before each new execution p revents analysis of said 
operation (h) and exposure of secret information about said semiconductor chip should a 
potential attacker intercept signal patterns generated during execution of said new disguised 
operation (h RJ ). 

10. (Currently Amended) A data carrier according to claim 9, characterized in that at least one 
random number (R,) enters into the determination of the new disguised input data (x ®RJ and 
at least two random numbers (R h RJ enter into the determination of the new_disguised operations 
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1 1 . (Currently Amended) A data carrier according to claim 9, characterized in that the new 
disguised operation (h R1R2 ) is generated from the input data (x) with the aid of XOR operations 
and the new disguised input data is generated from the input data (x) with the aid of XOR 
operations. 

12. (Canceled) 

13. (Currently Amended) A data carrier according to claim 12, characterized in that at least two 
disguised operations (h RlR2 , h RI > R2 ) are permanently stored in the data carrier in advance and one 
of the stored disguised operations (h RIR2 , h RrR2 <) is selected randomly as the new disguised 
operation when a- the new disguised operation is to be executed. 

14. (Currently Amended) A data carrier according to claim 13, characterized in that the random 
numbers (R } , RJ for determining the first disguised operation (h RIR2 ) are inverse to the random 
numbers (Rj ' R 2 *) for determining the second disguised operation (h RrR2 ) with respect to the 
combination used for determining the new disguised operations (h RlR2 , h R} , R2 ). 

15. (Currently Amended) A data carrier according to claim 9, characterized in that the new 
disguised operation (h R1R2 ) is recalculated before its execution and the random numbers (R lf RJ 
are redetermined for said calculation. 

16. (Previously Presented). A data carrier according to claim 9, characterized in that the 
operation (h) is realized by a table stored in the data carrier which establishes an association 
between the input data (x) and the output data (y). 

17. (Original) A data carrier according to claim 16, characterized in that the disguising of the 
input data (x) contained in the table is effected by combination with the at least one random 
number (RJ and the disguising of the output data (y) contained in the table is effected by 
combination with the at least one further random number (RJ, 
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1 8. (Previously Presented) A data carrier according to claim 1 , characterized in that the operation 
(h) is a nonlinear operation with respect to the combination used for disguising the operation (h). 
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